Rug pulls and honeypot tokens

How token launches and DeFi projects are set up to trap buyers, the contract and liquidity red flags to check, and why many "airdrops" are just exit liquidity.

Last reviewed 2026-10-27 · 2 min read

On this page
  1. Rug pulls
  2. Honeypot tokens
  3. Red flags to check
  4. Airdrops as exit liquidity

Not every scam steals from your wallet directly. Some just persuade you to buy something worthless. Rug pulls and honeypot tokens are designed to take your money in exchange for a token you cannot sell or that collapses to zero.

Rug pulls

A rug pull is when a project's creators take the money and leave. Common forms:

  • Liquidity pull. The team creates a trading pool with their token and a real asset, waits for buyers, then removes the real asset from the pool. The token price collapses.
  • Team dump. Insiders hold most of the supply and sell it all into buyers' demand.
  • Mint or upgrade abuse. The contract lets the owner mint unlimited new tokens or change the code, and they use it.
  • Soft rug. The team slowly abandons the project after raising money, with no single dramatic event.

Honeypot tokens

A honeypot token's contract lets people buy but blocks or heavily taxes selling, for everyone except the owner. Charts look great because nobody can sell. Some honeypots add the restriction only after a launch period, so early checks can look clean.

Red flags to check

  • Anonymous team with no track record, plus heavy marketing and influencer promotion.
  • Concentrated supply. A handful of wallets hold most of the tokens. Block explorers show the top holders.
  • Unlocked or small liquidity. Liquidity that is not locked, or locked only briefly, can be pulled.
  • Owner privileges. The contract owner can mint, pause trading, blacklist addresses, change taxes or upgrade the contract.
  • Unverified contract source code on the block explorer.
  • No audit, or an "audit" from an unknown firm that cannot be found independently.
  • Promises of guaranteed returns or very high fixed yields.

Token-checking tools that analyse contracts for honeypot behaviour and owner privileges exist and can help, but none are perfect. A clean scan is not proof of safety.

Airdrops as exit liquidity

Some "airdrops" exist only to create a crowd of holders and buyers for insiders to sell to. Others ask you to buy the token, stake it or lock it to "qualify". If qualifying for an airdrop means buying a project's own token, you are being asked to fund it, not rewarded.